$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: nJYTTqwaNJVVzfi3repj5zInORzuNwRsxAlwSLkz/84= Subject key identifier: 79:62:5D:7C:C8:BE:3F:B6:46:AF:9F:E7:A0:1D:88:B4:89:D6:98:88 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 260B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 25F3 Signing time: Sun 06 Apr 2025 15:39:20 +0000 Manifest this update: Sun 06 Apr 2025 15:39:20 +0000 Manifest next update: Sun 13 Apr 2025 15:39:20 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: 48xC9cjQAsxUmMEpygPIMY+ZNYRuSKoXDVIxi827OYk=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9739 (0x260b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558 Validity Not Before: Apr 6 15:39:20 2025 GMT Not After : Apr 13 15:39:20 2025 GMT Subject: CN=67f2a028-e9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:ff:b5:ac:46:35:7d:26:64:67:6b:f9:94: 90:01:b6:be:4d:e6:ab:a2:2b:58:0c:a6:ed:eb:d9: fd:1a:1e:66:d9:70:4e:e2:d6:6e:95:18:41:9b:90: 27:8f:79:2a:ca:26:e8:7b:af:af:a9:61:b0:27:8e: a8:fe:39:e8:44:4c:63:62:1b:f4:d4:8c:3c:3c:02: b2:fc:fb:9d:f9:dc:a2:06:6d:93:17:7b:db:4c:25: 91:4c:df:5a:2a:20:cb:5c:30:79:05:69:36:8c:6f: 5b:ca:4a:d0:ef:dc:3a:bd:f0:2e:8a:55:d4:d2:e7: 69:cf:15:66:3b:c9:c4:89:ac:3a:ea:f3:5b:9e:8d: f6:a0:c1:5f:37:95:3d:44:05:86:d0:a7:8d:b7:14: 11:f4:2b:a2:43:3e:e0:7a:c4:72:b9:76:91:78:bc: 2f:95:b3:c2:77:39:40:f3:40:cb:da:a0:e0:1b:01: 31:cb:7c:43:27:bf:2e:18:30:e4:73:bb:82:61:cb: bf:9c:7e:33:01:c2:7a:ea:65:ad:88:ee:94:0e:83: 17:df:80:45:80:2b:b4:4b:8c:16:38:81:27:6c:ed: f7:ea:6e:62:9e:77:fb:ae:4f:37:9e:ee:eb:1a:d6: 03:7b:0a:d6:de:7c:5f:68:31:24:ba:9f:0f:1b:85: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:5D:7C:C8:BE:3F:B6:46:AF:9F:E7:A0:1D:88:B4:89:D6:98:88 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2b:a0:00:81:1a:83:e5:b4:da:bd:a4:55:a4:e1:95:c9:8a: cb:28:90:eb:9f:5e:10:ab:17:28:cd:c9:20:d8:06:60:5a:24: f5:24:a4:57:00:ac:d6:69:68:12:f8:3d:50:76:4c:d3:a5:15: fa:f1:ee:2a:3c:45:6c:9c:48:98:1e:5e:1d:a0:e8:bd:83:95: d3:59:99:38:16:0f:68:ee:e9:27:7d:be:b5:40:15:30:66:16: f0:0f:8e:0e:a4:74:c2:9e:d2:c0:55:de:b2:60:4e:30:20:f9: 49:51:3a:22:25:98:96:e8:0f:96:ae:a0:6f:09:a6:c4:28:d0: 16:c3:e2:b9:6c:58:46:52:54:f9:7e:34:41:4f:90:8c:ff:25: 27:90:68:2f:b1:cd:4a:0e:4a:66:9b:9e:83:a7:f2:4b:26:e1: 0e:21:d0:48:24:04:7b:25:2c:d5:bf:a6:11:99:e2:4a:fd:ff: 9b:86:f7:55:40:79:22:72:9b:f5:05:73:a7:24:e8:3e:1e:06: 5c:38:3a:66:0b:45:36:ae:97:6b:53:32:2e:c3:73:ad:7f:75: f2:cf:4e:3f:d3:db:4d:aa:5b:5a:3a:e7:ad:e4:21:47:f8:07: 11:99:62:d9:d2:75:ec:a5:65:ba:69:80:82:28:e9:2c:79:a8: a7:cc:a7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNDA2MTUzOTIwWhcNMjUwNDEzMTUzOTIwWjAYMRYwFAYD VQQDEw02N2YyYTAyOC1lOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu53/taxGNX0mZGdr+ZSQAba+TearoitYDKbt69n9Gh5m2XBO4tZulRhBm5An j3kqyiboe6+vqWGwJ46o/jnoRExjYhv01Iw8PAKy/Pud+dyiBm2TF3vbTCWRTN9a KiDLXDB5BWk2jG9bykrQ79w6vfAuilXU0udpzxVmO8nEiaw66vNbno32oMFfN5U9 RAWG0KeNtxQR9CuiQz7gesRyuXaReLwvlbPCdzlA80DL2qDgGwExy3xDJ78uGDDk c7uCYcu/nH4zAcJ66mWtiO6UDoMX34BFgCu0S4wWOIEnbO336m5innf7rk83nu7r GtYDewrW3nxfaDEkup8PG4UZ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHliXXzI vj+2Rq+f56AdiLSJ1piIMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmK6AAgRqD5bTavaRVpOGVyYrLKJDrn14Qqxcozckg2AZgWiT1JKRX AKzWaWgS+D1QdkzTpRX68e4qPEVsnEiYHl4doOi9g5XTWZk4Fg9o7uknfb61QBUw ZhbwD44OpHTCntLAVd6yYE4wIPlJUToiJZiW6A+WrqBvCabEKNAWw+K5bFhGUlT5 fjRBT5CM/yUnkGgvsc1KDkpmm56Dp/JLJuEOIdBIJAR7JSzVv6YRmeJK/f+bhvdV QHkicpv1BXOnJOg+HgZcODpmC0U2rpdrUzIuw3Otf3Xyz04/09tNqltaOuet5CFH +AcRmWLZ0nXspWW6aYCCKOkseainzKfo -----END CERTIFICATE-----Generated at Sun Apr 6 17:58:31 2025 by rpki-client